locke 0.5.1

Unified credentials framework — encrypted config, OS keystore, Vaultwarden integration

Locke — Python

Unified credentials framework — encrypted config, OS keystore, Vaultwarden integration.

Install

pip install -e ".[dev]"

Usage

Library

import locke

# Load and decrypt config → flat env vars
env = locke.load_config(".locke/config.encrypted.json")
# env["MONGO_URI"], env["SENTRY_DSN"], etc.

# Resolve a single credential
cred = locke.resolve_credential("LOCKE_ENCRYPTION_KEY")

# Get a vault secret
secret = locke.get_vault_secret("myproject/staging/api_key")

CLI

# Decrypt + flatten → shell exports
eval $(locke env)

# Decrypt to stdout
locke decrypt

# Encrypt plaintext config
locke encrypt

# Manage OS keystore
locke keystore set LOCKE_ENCRYPTION_KEY --prompt
locke keystore get LOCKE_ENCRYPTION_KEY

# Get vault secret
locke vault get myproject/staging/api_key

# Initialize project
locke init --project myproject --tenant staging

Environment Variables

Variable	Purpose
LOCKE_ENV	Override environment detection
LOCKE_ENCRYPTION_KEY	Encryption key (if not in keystore)
LOCKE_USE_BIOMETRIC	Set false to disable biometric gating
LOCKE_VAULT_URL	Vaultwarden server URL
LOCKE_VAULT_USERNAME	Vaultwarden username

Testing

cd python
pip install -e ".[dev]"
pytest